"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

2026-04-29来源 Snyk BlogEnglish
"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages
A new npm supply chain attack self-branded "Mini Shai-Hulud" compromised four SAP-ecosystem packages on April 29, 2026. Snyk has live advisories. Here's the technical breakdown, IOCs, and what to do.

原文：https://www.a8q9.cn/en/article/a-mini-shai-hulud-has-appeared-bun-based-stealer-hits-sap-cap-js-and-mbt-npm-pac-fb6bba.html

相关文章